Last updated: 18 July 2026. This Privacy Policy explains how baliluxurypackage.com (“this site”, “we”, “our”) collects, uses, stores and protects personal data when you browse the site, send an enquiry, or book a luxury travel package. The site is operated by Bali Premium Trip, a Bali-based travel concierge and part of Juara Holding Group. We publish price bands, itineraries and package guides; bookings themselves are arranged directly between you and our planning team, primarily over WhatsApp.
Who is responsible for your data
For the purposes of Indonesia’s Law No. 27 of 2022 on Personal Data Protection (UU PDP) and, where it applies to visitors from the European Economic Area or the United Kingdom, the EU/UK General Data Protection Regulation (GDPR), the data controller is Bali Premium Trip, operating from Bali, Indonesia. If you contact us through this site, your data is handled by our planning team in Indonesia. Questions about this policy can be sent to us on WhatsApp at +62 811-2859-0000 — the same channel we use for quotes and bookings — or through the contact form on our Contact page.
What we collect and why
We deliberately keep data collection narrow, because a travel enquiry does not need much to be answered well. The categories are:
- Enquiry and booking data. When you message us on WhatsApp or submit the contact form, we receive the details you choose to share: your name, your WhatsApp number or phone number, travel dates, party size, occasion (honeymoon, family trip, wedding, retreat), budget band, villa or resort preferences, and any special requests such as dietary needs or accessibility requirements. We use this solely to prepare your quote, confirm your itinerary, and support you during the trip.
- Booking fulfilment data. If you confirm a package, we pass the minimum details needed — typically guest names, arrival flight number, and stay dates — to the specific villas, resorts, drivers, yacht operators and venues delivering your itinerary. They receive only what they need to host you, nothing more.
- Technical data. Like almost every website, our server records standard access logs: IP address, browser type, pages visited and timestamps. We use these for security, debugging and aggregate performance monitoring, not to profile individual visitors.
- Payment data. We do not collect or store card numbers on this website. Deposits and payments are made through secure third-party payment links; the payment provider processes your card details under its own privacy policy and we see only the confirmation of payment.
What we do not do
We do not sell, rent or trade your personal data to anyone. We do not send marketing broadcasts to your WhatsApp number: the thread you open with us is used for your enquiry and your trip, and it goes quiet when your trip is done unless you message us again. We do not require you to create an account, and we do not collect data from children — our packages are booked by adults, and any child details (for example, ages for a family villa) are provided by the booking adult solely for trip planning.
Legal bases for processing
Under UU PDP and the GDPR, we rely on: contract performance (preparing the quote you asked for and delivering the package you booked); legitimate interests (site security, fraud prevention, improving our guides); legal obligation (retaining booking and payment records where Indonesian tax and accounting rules require it); and consent, where you have volunteered optional details such as anniversary dates or surprise arrangements. You may withdraw consent at any time by telling us on the same WhatsApp thread.
Cookies and analytics
This site uses only the cookies needed for basic operation and caching, plus privacy-conscious analytics that measure page views in aggregate. We do not run third-party advertising trackers or remarketing pixels. Embedded content — for example a map on the contact page — may set its own cookies under the relevant provider’s policy. You can block or clear cookies in your browser at any time without losing access to any part of the site.
How long we keep data
Enquiry threads that do not become bookings are kept for up to twenty-four months so we can pick up the conversation if you come back, then deleted. Confirmed booking records are retained for the period required by Indonesian accounting and tax regulations (generally up to ten years for financial records), after which they are deleted or anonymised. Server logs rotate automatically and are kept for no more than ninety days.
Where your data lives and cross-border transfers
Our web server and planning team are based in Indonesia. WhatsApp is operated by Meta Platforms and stores message data under its own global infrastructure and privacy policy; by contacting us on WhatsApp you are also subject to WhatsApp’s terms. When your itinerary involves partners outside Indonesia (rare, but possible for multi-island or connecting arrangements), we transfer only the minimum details needed for that supplier to deliver its service, consistent with UU PDP’s cross-border transfer requirements.
Your rights
Under UU PDP — and under the GDPR if it applies to you — you have the right to: access the personal data we hold about you; correct inaccurate data; delete your data where we have no overriding legal duty to keep it; restrict or object to specific processing; receive the data you supplied in a portable format; and complain to the relevant supervisory authority. To exercise any of these rights, message us on WhatsApp at +62 811-2859-0000 with the request; we respond within a reasonable period and in any case within the timeframes UU PDP prescribes. We will verify that the request comes from the number associated with the data before acting on it.
Security
The site runs over HTTPS with modern TLS. Access to booking information is limited to the planning team members working on your trip. Partners receive guest details through direct, private channels — never through public documents or shared links. No system is perfectly secure, but we deliberately minimise what we collect so that there is little to lose in the worst case.
Changes to this policy
If we change this policy, the new version is published on this page with an updated date at the top. Material changes that affect how an active booking’s data is handled will be flagged to you directly on your booking thread. Continued use of the site after a change means you accept the updated policy.
Read this policy together with our Terms & Conditions, which govern bookings and use of the site. For anything unclear, ask us directly — WhatsApp +62 811-2859-0000 is answered by the same team that plans the trips.